城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 56.42.0.0 - 56.42.255.255
CIDR: 56.42.0.0/16
NetName: USPS1
NetHandle: NET-56-42-0-0-1
Parent: NET56 (NET-56-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: United States Postal Service (USPS-3-Z)
RegDate: 1992-11-02
Updated: 2025-04-18
Ref: https://rdap.arin.net/registry/ip/56.42.0.0
OrgName: United States Postal Service
OrgId: USPS-3-Z
Address: 4200 Wake Forest Road
City: Raleigh
StateProv: NC
PostalCode: 27668-9007
Country: US
RegDate: 2021-07-27
Updated: 2024-12-26
Ref: https://rdap.arin.net/registry/entity/USPS-3-Z
OrgTechHandle: ZU38-ARIN
OrgTechName: Domain Admin
OrgTechPhone: +1-800-877-7435
OrgTechEmail: domainadmin@imail.usps.gov
OrgTechRef: https://rdap.arin.net/registry/entity/ZU38-ARIN
OrgTechHandle: KONTO18-ARIN
OrgTechName: Kontos, Emmanuel
OrgTechPhone: +1-919-649-7461
OrgTechEmail: emmanuel.kontos@usps.gov
OrgTechRef: https://rdap.arin.net/registry/entity/KONTO18-ARIN
OrgAbuseHandle: ZU38-ARIN
OrgAbuseName: Domain Admin
OrgAbusePhone: +1-800-877-7435
OrgAbuseEmail: domainadmin@imail.usps.gov
OrgAbuseRef: https://rdap.arin.net/registry/entity/ZU38-ARIN
OrgTechHandle: YOKLA1-ARIN
OrgTechName: Yoklavich, John
OrgTechPhone: +1-919-501-9334
OrgTechEmail: john.f.yoklavich@usps.gov
OrgTechRef: https://rdap.arin.net/registry/entity/YOKLA1-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 56.42.185.171
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53006
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;56.42.185.171. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026031802 1800 900 604800 86400
;; Query time: 6 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Mar 19 02:18:37 CST 2026
;; MSG SIZE rcvd: 106Host 171.185.42.56.in-addr.arpa not found: 2(SERVFAIL)
server can't find 56.42.185.171.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 129.226.53.203 | attackbots | 2020-04-24T01:20:27.463552linuxbox-skyline sshd[32837]: Invalid user dr from 129.226.53.203 port 58090 ... |
2020-04-24 15:40:24 |
| 210.18.159.82 | attackbots | $f2bV_matches |
2020-04-24 15:58:18 |
| 82.147.120.41 | attackbotsspam | Brute force attempt |
2020-04-24 15:37:34 |
| 27.150.22.155 | attackbots | Apr 23 03:28:19 lock-38 sshd[1388919]: Failed password for root from 27.150.22.155 port 44652 ssh2 Apr 23 03:28:20 lock-38 sshd[1388919]: Disconnected from authenticating user root 27.150.22.155 port 44652 [preauth] Apr 23 03:32:35 lock-38 sshd[1389122]: Invalid user rtkit from 27.150.22.155 port 47090 Apr 23 03:32:35 lock-38 sshd[1389122]: Invalid user rtkit from 27.150.22.155 port 47090 Apr 23 03:32:35 lock-38 sshd[1389122]: Failed password for invalid user rtkit from 27.150.22.155 port 47090 ssh2 ... |
2020-04-24 15:36:27 |
| 222.186.180.147 | attack | Apr 24 09:37:28 * sshd[22486]: Failed password for root from 222.186.180.147 port 54406 ssh2 Apr 24 09:37:32 * sshd[22486]: Failed password for root from 222.186.180.147 port 54406 ssh2 |
2020-04-24 15:52:34 |
| 167.172.195.227 | attackbots | Invalid user admin from 167.172.195.227 port 40126 |
2020-04-24 15:57:06 |
| 138.204.24.142 | attackspambots | 2020-04-24T05:01:30.439802shield sshd\[12012\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.204.24.142 user=root 2020-04-24T05:01:32.724860shield sshd\[12012\]: Failed password for root from 138.204.24.142 port 4299 ssh2 2020-04-24T05:05:45.202946shield sshd\[12952\]: Invalid user lr from 138.204.24.142 port 32581 2020-04-24T05:05:45.207444shield sshd\[12952\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.204.24.142 2020-04-24T05:05:47.165330shield sshd\[12952\]: Failed password for invalid user lr from 138.204.24.142 port 32581 ssh2 |
2020-04-24 15:18:12 |
| 14.29.215.5 | attackbots | srv04 Mass scanning activity detected Target: 23234 .. |
2020-04-24 15:36:44 |
| 177.91.64.37 | attackbots | Brute force attempt |
2020-04-24 16:03:35 |
| 196.43.231.123 | attackbots | Apr 24 07:00:25 lock-38 sshd[1455514]: Failed password for root from 196.43.231.123 port 37444 ssh2 Apr 24 07:00:25 lock-38 sshd[1455514]: Disconnected from authenticating user root 196.43.231.123 port 37444 [preauth] Apr 24 07:01:17 lock-38 sshd[1455534]: Invalid user cv from 196.43.231.123 port 41851 Apr 24 07:01:17 lock-38 sshd[1455534]: Invalid user cv from 196.43.231.123 port 41851 Apr 24 07:01:17 lock-38 sshd[1455534]: Failed password for invalid user cv from 196.43.231.123 port 41851 ssh2 ... |
2020-04-24 15:27:39 |
| 41.176.40.43 | attack | DATE:2020-04-24 05:53:00, IP:41.176.40.43, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq) |
2020-04-24 15:39:40 |
| 49.232.43.151 | attackbotsspam | 2020-04-24T02:51:42.4830041495-001 sshd[24451]: Failed password for root from 49.232.43.151 port 51232 ssh2 2020-04-24T02:56:27.3564301495-001 sshd[24686]: Invalid user lw from 49.232.43.151 port 42470 2020-04-24T02:56:27.3595681495-001 sshd[24686]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.43.151 2020-04-24T02:56:27.3564301495-001 sshd[24686]: Invalid user lw from 49.232.43.151 port 42470 2020-04-24T02:56:30.1496771495-001 sshd[24686]: Failed password for invalid user lw from 49.232.43.151 port 42470 ssh2 2020-04-24T03:01:14.4802491495-001 sshd[24984]: Invalid user sd from 49.232.43.151 port 33712 ... |
2020-04-24 16:01:33 |
| 222.186.42.136 | attackspam | 2020-04-24T09:26:53.779787sd-86998 sshd[39128]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.136 user=root 2020-04-24T09:26:55.912509sd-86998 sshd[39128]: Failed password for root from 222.186.42.136 port 63959 ssh2 2020-04-24T09:26:58.118074sd-86998 sshd[39128]: Failed password for root from 222.186.42.136 port 63959 ssh2 2020-04-24T09:26:53.779787sd-86998 sshd[39128]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.136 user=root 2020-04-24T09:26:55.912509sd-86998 sshd[39128]: Failed password for root from 222.186.42.136 port 63959 ssh2 2020-04-24T09:26:58.118074sd-86998 sshd[39128]: Failed password for root from 222.186.42.136 port 63959 ssh2 2020-04-24T09:26:53.779787sd-86998 sshd[39128]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.136 user=root 2020-04-24T09:26:55.912509sd-86998 sshd[39128]: Failed password for root from ... |
2020-04-24 15:33:17 |
| 160.124.48.188 | attackbotsspam | Total attacks: 2 |
2020-04-24 15:49:45 |
| 5.88.130.165 | attackbots | 20/4/23@23:52:34: FAIL: Alarm-Intrusion address from=5.88.130.165 ... |
2020-04-24 15:56:19 |